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IN THE CLAIMS 
Please amend claim 8 as indicated below. 

This listing of claims will replace all prior versions and listing of claims in the 
application. 

Listing of Claims: 

Claim 1 (original) A method of bypassing an initial sign-on screen of an underlying 
operating system with a single sign-on capability comprising the steps of: 

providing an application framework, wherein said application framework logs 
on a user with a first level of access in said underlying operating system; 

generating an application framework sign-on screen; 

entering a logon input on said generated application framework sign-on 
screen; and 

comparing said logon input with an application framework security database 
to determine level of access. 

Claim 2 (original) The method as recited in claim 1 further comprising the step of: 
selecting an indication of said first level of access. 

Claim 3 (original) The method as recited in claim 1, wherein said user is logged onto 
said underlying operating system and an application environment with said first level 
of access thereby bypassing said initial sign-on screen of said underlying operating 
system with said single sign-on. 

Claim 4 (original) The method as recited in claim 1, wherein if said logon input is 
not entitled to a second level of access according to said application framework 
security database, then said user is logged onto an application environment and said 
underlying operating system as said first level of access. 
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Claim 5 (original) The method as recited in claim 1, wherein said logon input 
comprises a user identification and a user password. 

Claim 6 (original) The method as recited in claim 1, wherein if said logon input is 
entitled to a second level of access according to said application framework security 
database, then the method further comprises the step of: 

executing a switch user program to switch said user to said second level of 

access. 

Claim 7 (original) The method as recited in claim 1, wherein said application 
framework security database stores system operator information, wherein said 
application fi-amework security database defines at least one of the following: users, 
passwords, groups of users and application specific authorization. 

Claim 8 (currently amended) The method as recited in claim 7, wherein said a switch 
user program switches said user to said second level of access by modifying an 
underlying operating system's registry. 

Claim 9 (original) The method as recited in claim 8, wherein said switch user 
program logs off said user with said first level of access, wherein said underlying 
operating system logs on said user with said second level of access. 

Claim 10 (original) The method as recited in claim 2, wherein if said logon input is 
not entitled to a second level of access according to said application framework 
security database, then an indication of said second level of access will not be 
generated to said user, wherein said user is restricted to said first level of access. 

Claim 1 1 (original) The method as recited in claim 2, wherein if said logon input is 
entitled to a second level of access according to said application fi-amework security 
database, then the method further comprises the step of: 

generating an indication of said second level of access. 
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Claim 12 (original) The method as recited in claim 1 1 further comprising the step of: 
executing a switch user program to switch level of access to said second level 
of access by selecting said indication of said second level of access. 

Claim 13 (original) The method as recited in claim 12, wherein said switch user 
program switches said user to said second level of access by modifying an underlying 
operating system's registry. 

Claim 14 (original) The method as recited in claim 13, wherein said switch user 
program logs off said user with said first level of access, wherein said underlying 
operating system logs on said user with said second level of access. 

Claim 15 (original) The method as recited in claim 1 further comprising the step of: 
selecting an indication of a second level of access. 

Claim 16 (original) The method as recited in claim 15, wherein if said logon input is 
not entitled to said second level of access according to said application fi-amework 
security database, then said user is restricted to said first level of access. 

Claim 17 (original) The method as recited in claim 15, wherein if said logon input is 
entitled to said second level of access according to said application fi*amework 
security database, then the method further comprises the step of: 

executing a switch user program to switch said user to said second level of 

access. 

Claim 18 (original) The method as recited in claim 17 further comprising the step of: 
transferring said logon input to said underlying operating system for 
verification. 

Claim 19 (original) The method as recited in claim 18 further comprising the step of: 
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comparing said logon input with an underlying operating system security 
database, wherein if said imderlying operating system security database verifies said 
user with access to said second level of access, then said ' switch user program 
switches said user to said second level of access. 

Claim 20 (original) The method as recited in claim 19, wherein said switch user 
program switches said user to said second level of access by modifying an underlying 
operating system's registry. 

Claim 21 (original) The method as recited in claim 20, wherein said switch user 
program logs off said user with said first level of access, wherein said underlying 
operating system logs on said user with said second level of access. 

Claim 22 (original) The method as recited in claim 18 fiirther comprising the step of: 
comparing said logon input with an underlying operating system security 

database, wherein if said underlying operating system security database does not 

verify said user with access to said second level of access, then the method further 

comprises the step of: 

requesting from said user a logon identification; and 

comparing said logon identification with said underlying operating system 
security database. 

Claim 23 (original) The method as recited in claim 22, wherein said logon 
identification comprises a user identification and a user password. 

Claim 24 (original) The method as recited in claim 22, wherein if said underlying 
operating system security database does not verify said user with access to said 
second level of access, then said user is restricted to said first level of access. 

Claim 25 (original) The method as recited in claim 22, wherein if said underlying 
operating system security database verifies said user with access to said second level 
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of access, then said switch user program switches said user to said second level of 
access. 

Claim 26 (original) The method as recited in claim 25, wherein said switch user 
program switches said user to said second level of access by modifying an underlying 
operating system's registry. 

Claim 27 (original) The method as recited in claim 26, wherein said switch user 
program logs off said user with said first level of access, wherein said underlying 
operating system logs on said user with said second level of access. 

Claim 28 (original) A computer program product having a computer readable 
medium having computer program logic recorded thereon for bypassing an initial 
sign-on screen of an underlying operating system with a single sign capability, 
comprising: 

progranmiing operable for providing an application firamework, wherein said 
application firamework logs on a user with a first level of access in said underlying 
operating system; 

programming operable for generating an application firamework sign-on 

screen; 

programming operable for receiving a logon input entered on said generated 
application fi-amework sign-on screen; and 

programming operable for comparing said logon input with an application 
fi-amework security database to determine level of access. 

Claim 29 (original) The computer program product as recited in claim 28 fiirther 
comprises: 

progranmiing operable for selecting an indication of said first level of access. 

Claim 30 (original) The computer program product as recited in claim 28, wherein 
said user is logged onto said underlying operating system and an application 
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environment with said first level of access thereby bypassing said initial sign-on 
screen of said underlying operating system with said single sign-on. 

Claim 31 (original) The computer program product as recited in claim 28, wherein if 
said logon input is not entitled to a second level of access according to said 
application framework security database, then said user is restricted to said first level 
of access. 

Claim 32 (original) The computer program product as recited in claim 28, wherein 
said logon input comprises a user identification and a user password. 

Claim 33 (original) The computer program product as recited in claim 28, wherein 
said application framework security database stores system operator information, 
wherein said application framework security database defines at least one of the 
following: users, passwords, groups of users and application specific authorization. 

Claim 34 (original) The computer program product as recited in claim 28, wherein if 
said logon input is entitled to a second level of access according to said application 
framework security database, then the computer program product ftirther comprises: 

progranmiing operable for executing a switch user program to switch said user 
to said second level of access. 

Claim 35 (original) The computer program product as recited in claim 34, wherein 
said switch user program switches said user to said second level of access by 
modifying an underlying operating system's registry. 

Claim 36 (original) The computer program product as recited in claim 35, wherein 
said switch user program logs off said user with said first level of access, wherein 
said underlying operating system logs on said user with said second level of access. 
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Claim 37 (original) The computer program product as recited in claim 29, wherein if 
said logon input is not entitled to a second level of access according to said 
application framework security database, then an indication of said second level of 
access will not be generated to said user, wherein said user is restricted to said first 
level of access. 

Claim 38 (original) The computer program product as recited in claim 29, wherein if 
said logon input is entitled to a second level of access according to said application 
framework security database, then the computer program product further comprises: 

programming operable for generating an indication of said second level of 

access. 

Claim 39 (original) The computer program product as recited in claim 38 fiirther 
comprises: 

programming operable for executing a switch user program to switch level of 
access to said second level of access by selecting said indication of said second level 
of access. 

Claim 40 (original) The computer program product as recited in claim 39, wherein 
said switch user program switches said user to said second level of access by 
modifying an underlying operating system's registry. 

Claim 41 (original) The computer program product as recited in claim 40, wherein 
said switch user program logs off said user with said first level of access, wherein 
said underlying operating system logs on said user with said second level of access. 

Claim 42 (original) The computer program product as recited in claim 28 further 
comprises: 

programming operable for selecting an indication of a second level of access. 
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Claim 43 (original) The computer program product as recited in claim 42, wherein if 
said logon input is not entitled to said second level of access according to said 
application framework security database, then said user is restricted to said first level 
of access. 

Claim 44 (original) The computer program product as recited in claim 42, wherein if 
said logon input is entitled to said second level of access according to said application 
framework security database, then the computer program product further comprises: 

programming operable for executing a switch user program to switch said user 
to said second level of access. 

Claim 45 (original) The computer program product as recited in claim 44 further 
comprises: 

programming operable for transferring said logon input to said underlying 
operating system for verification. 

Claim 46 (original) The computer program product as recited in claim 45 further 
comprises: 

programming operable for comparing said logon input with an underlying 
operating system security database, wherein if said xmderlying operating system 
security database verifies said user with access to said second level of access, then 
said switch user program switches said user to said second level of access. 

Claim 47 (original) The computer program product as recited in claim 46, wherein 
said switch user program switches said user to said second level of access by 
modifying an underlying operating system's registry. 

Claim 48 (original) The computer program product as recited in claim 47, wherein 
said switch user program logs off said user with said first level of access, wherein 
said underlying operating system logs on said user with said second level of access. 
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Claim 49 (original) The computer program product as recited in claim 45 further 
comprises: 

progranuning operable for comparing said logon input with an underlying 
operating system security database, wherein if said underlying operating system 
security database does not verify said user with access to said second level of access, 
then the computer program product further comprises: 

programming operable for requesting from said user a logon identification; 

and 

programming operable for comparing said logon identification with said 
underlying operating system security database. 

Claim 50 (original) The computer program product as recited in claim 49, wherein 
said logon identification comprises a user identification and a user password. 

Claim 51 (original) The computer program product as recited in claim 49, wherein if 
said imderlying operating system security database does not verify said user with 
access to said second level of access, then said user is restricted to said first level of 
access. 

Claim 52 (original) The computer program product as recited in claim 49, wherein if 
said underlying operating system security database verifies said user with access to 
said second level of access, then said switch user program switches said user to said 
second level of access. 

Claim 53 (original) The computer program product as recited in claim 52, wherein 
said switch user program switches said user to said second level of access by 
modifying an underlying operating system's registry. 

Claim 54 (original) The computer program product as recited in claim 53, wherein 
said switch user program logs off said user with said first level of access, wherein 
said underlying operating system logs on said user with said second level of access. 
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Claim 55 (original) A data processing system, comprising: 
a processor; 

a memory unit operable for storing a computer program operable for 
bypassing an initial sign-on screen of an underlying operating system with a single 
sign capability; 

an input mechanism; 

an output mechanism; and 

a bus system coupling the processor to the memory unit, input mechanism, 
and output mechanism, wherein the computer program is operable for performing the 
following programming steps: 

providing an application framework, wherein said application 
framework logs on a user with a first level of access in said underlying operating 
system; 

generating an application framework sign-on screen; 

receiving a logon input entered on said generated application 
framework sign-on screen; and 

comparing said logon input with an application framework security 
database to determine level of access. 

Claim 56 (original) The data processing system as recited in claim 55, wherein the 
computer program is fiirther operable to perform the programming step: 
selecting an indication of said first level of access. 

Claim 57 (original) The data processing system as recited in claim 55, wherein said 
user is logged onto said underlying operating system and an application environment 
with said first level of access thereby bypassing said initial sign-on screen of said 
underlying operating system with said single sign-on. 

Claim 58 (original) The data processing system as recited in claim 55, wherein if said 
logon input is not entitled to a second level of access according to said application 
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framework security database, then said user is logged onto an application 
environment and said underlying operating system as said first level of access. 

Claim 59 (original) The data processing system as recited in claim 55, wherein said 
logon input comprises a user identification and a user password. 

Claim 60 (original) The data processing system as recited in claim 55, wherein said 
application framework security database stores system operator information, wherein 
said application framework security database defines at least one of the following: 
users, passwords, groups of users and application specific authorization. 

Claim 61 (original) The data processing system as recited in claim 55, wherein if said 
logon input is entitled to a second level of access according to said application 
framework security database, then the computer program is fiirther operable to 
perform the programming step: 

executing a switch user program to switch said user to said second level of 

access. 

Claim 62 (original) The data processing system as recited in claim 61, wherein said 
switch user program switches said user to said second level of access by modifying an 
underlying operating system's registry. 

Claim 63 (original) The data processing system as recited in claim 62, wherein said 
switch user program logs off said user with said first level of access, wherein said 
underlying operating system logs on said user with said second level of access. 

Claim 64 (original) The data processing system as recited in claim 56, wherein if said 
logon input is not entitled to a second level of access according to said application 
framework security database, then an indication of said second level of access will 
not be generated to said user, wherein said user is restricted to said first level of 
access. 
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Claim 65 (original) The data processing system as recited in claim 56, wherein if said 
logon input is entitled to a second level of access according to said application 
framework secimty database, then the computer program is further operable to 
perform the programming step: 

generating an indication of said second level of access. 

Claim 66 (original) The data processing system as recited in claim 65, wherein the 
computer program is further operable to perform the programming step: 

executing a switch user program to switch level of access to said second level 
of access by selecting said indication of said second level of access. 

Claim 67 (original) The data processing system as recited in claim 65, wherein said 
switch user program switches said user to said second level of access by modifying an 
underlying operating system's registry. 

Claim 68 (original) The data processing system as recited in claim 67, wherein said 
switch user program logs off said user with said first level of access, wherein said 
underlying operating system logs on said user with said second level of access. 

Claim 69 (original) The data processing system as recited in claim 55, wherein the 
computer program is further operable to perform the programming step: 
selecting an indication of a second level of access. 

Claim 70 (original) The data processing system as recited in claim 69, wherein if said 
logon input is not entitled to said second level of access according to said application 
framework security database, then said user is restricted to said first level of access. 

Claim 71 (original) The data processing system as recited in claim 69, wherein if said 
logon input is entitled to said second level of access according to said application 
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framework security database, then the computer program is further operable to 
perform the programming step: 

executing a switch user program to switch said user to said second level of 

access. 

Claim 72 (original) The data processing system as recited in claim 71, wherein the 
computer program is further operable to perform the programming step: 

transferring said logon input to said underlying operating system for 
verification. 

Claim 73 (original) The data processing system as recited in claim 72, wherein the 
computer program is further operable to perform the programming step: 

comparing said logon input with an underlying operating system security 
database, wherein if said xmderlying operating system security database verifies said 
user with access to said second level of access, then said switch user program 
switches said user to said second level of access. 

Claim 74 (original) The data processing system as recited in claim 73, wherein said 
switch user program switches said user to said second level of access by modifying an 
underlying operating system's registry. 

Claim 75 (original) The data processing system as recited in claim 74, wherein said 
switch user program logs off said user with said first level of access, wherein said 
underlying operating system logs on said user with said second level of access. 

Claim 76 (original) The data processing system as recited in claim 72, wherein the 
computer program is further operable to perform the progrannming step: 

comparing said logon input with an underlying operating system security 
database, wherein if said underlying operating system security database does not 
verify said user with access to said second level of access, then the computer program 
is further operable to perform the programming steps: 
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requesting from said user a logon identification; and 

comparing said logon identification with said underlying operating system 
security database. 

Claim 77 (original) The data processing system as recited in claim 76, wherein said 
logon identification comprises a user identification and a user password. 

Claim 78 (original) The data processing system as recited in claim 76, wherein if said 
underlying operating system security database does not verify said user with access to 
said second level of access, then said user is restricted to said first level of access. 

Claim 79 (original) The data processing system as recited in claim 76, wherein if said 
underlying operating system security database verifies said user with access to said 
second level of access, then said switch user program switches said user to said 
second level of access. 

Claim 80 (original) The data processing system as recited in claim 79, wherein said 
switch user program switches said user to said second level of access by modifying an 
underlying operating system's registry. 

Claim 81 (original) The data processing system as recited in claim 80, wherein said 
switch user program logs off said user with said first level of access, wherein said 
underlying operating system logs on said user with said second level of access. 
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